Hi,
I'm sending two patches with enhancements related to IPA HBAC code. I stumbled
upon these while doing the SELinux work because I'm planning to re-use some
parts of the HBAC code.
#081:
Comment ipa_host_search_base in man pages - nothing special about this one
#082:
Add support for multiple host search bases in HBAC code. I recall we discussed
this one several weeks ago and the conclusion was that we wanted the support
but it wasn't the number one topic at that moment.
The only limitation in my implementation is related to multiple search bases
in combination with dereference code. Basically, if ipa_support_srchost =
false and there is a filter given in host search base, I ignore it. I believe
something similar is already in other parts of SSSD using deref. Correct me if
I'm wrong.
I'd like to ask you for quick review, since my SELinux work depends on this.
Thanks
Jan
Show replies by date